Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

CVEs (377)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-2665 1Rosariosis 1Rosariosis Jun 17, 2026 May 12, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
CVE-2023-31150 1Selinc 10Sel 2241 Rtac Module Firmware Sel 3350 FirmwareSel 3505 3 Firmware+7 more Jun 17, 2026 May 10, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords...Show more A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) database system could allow an authenticated attacker to retrieve passwords. See SEL Service Bulletin dated 2022-11-15 for more details. Show less
CVE-2022-44619 1Intel 1Data Center Manager Jun 17, 2026 May 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-43475 1Intel 1Data Center Manager Jun 17, 2026 May 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-27942 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 May 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-se...Show more The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.Show less
CVE-2023-23542 1Apple 1Macos Jun 17, 2026 May 8, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-sensitive data...Show more A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-sensitive data.Show less
CVE-2023-23541 1Apple 2Ipados Iphone Os Jun 17, 2026 May 8, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s c...Show more A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s contacts.Show less
CVE-2022-43877 1Ibm 1Urbancode Deploy Jun 17, 2026 May 6, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM UrbanCode Deploy (UCD) versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148.
CVE-2023-22687 1Freesoul Deactivate Plugins Plugin Manager And Cleanup Project 1Freesoul Deactivate Plugins Plugin Manager And Cleanup Jun 17, 2026 Apr 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Insecure Storage of Sensitive Information vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup plugin <= 1.9.4.0 versions.
CVE-2023-0580 1Abb 1My Control System Jun 17, 2026 Apr 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control...Show more Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13. Show less
CVE-2022-39043 1Juiker 1Juiker Jun 17, 2026 Mar 27, 2023 N/A· v4 2.4 LOW· v3 N/A· v2 Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts.
CVE-2023-23522 1Apple 1Macos Jun 17, 2026 Feb 27, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An app may be able to observe unprotected user data.
CVE-2022-38090 1Intel 227Celeron J1750 Firmware Celeron J1800 FirmwareCeleron J1850 Firmware+224 more Jun 17, 2026 Feb 16, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access.
CVE-2021-36546 1Kitesky 1Kitecms Jun 17, 2026 Feb 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.
CVE-2022-2815 1Publify Project 1Publify Jun 17, 2026 Jan 14, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.
CVE-2023-22469 1Nextcloud 1Deck Jun 17, 2026 Jan 10, 2023 N/A· v4 3.5 LOW· v3 N/A· v2 Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. When getting the reference preview for Deck cards the user has no access to, unauthorized...Show more Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. When getting the reference preview for Deck cards the user has no access to, unauthorized user could eventually get the cached data of a user that has access. There are currently no known workarounds. It is recommended that the Nextcloud app Deck is upgraded to 1.8.2. Show less
CVE-2022-40959 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Dec 22, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leaked device permissions into untrusted subdocuments. This vulnerability affects Firefox ESR < 102.3, T...Show more During iframe navigation, certain pages did not have their FeaturePolicy fully initialized leading to a bypass that leaked device permissions into untrusted subdocuments. This vulnerability affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105.Show less
CVE-2022-32833 1Apple 3Iphone Os MacosSafari Jun 17, 2026 Dec 15, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history.
CVE-2022-34354 1Ibm 1Partner Engagement Manager Jun 17, 2026 Nov 16, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.
CVE-2022-34312 1Ibm 1Cics Tx Jun 17, 2026 Nov 14, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447.

Previous 1...131415...19 Next